Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: tRXNtebJdqAAxB5tUoIIphXFgnfbhF4kcA7Fh4RqmFQ=
Subject key identifier: B8:C5:E9:71:B8:F5:EF:66:69:76:DD:08:22:62:E8:7D:81:9A:4D:0A
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019776AEE2055218C9837798378B37D455CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 15A2
Signing time: Mon 16 Jun 2025 03:01:01 +0000
Manifest this update: Mon 16 Jun 2025 03:01:01 +0000
Manifest next update: Tue 17 Jun 2025 03:01:01 +0000
Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=)
2: U66mGG3Y8A4sBRmpQym2qej1efo.roa (hash: TlVlbRHV8GRl2ttGfufATtjwAKcckCzgbeG9Ag3deSU=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: 0i1kSX2pXWZFVjWQEiMZe+oZjqm72TdIVimiXYqUnUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:e2:05:52:18:c9:83:77:98:37:8b:37:d4:55:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Jun 16 03:01:01 2025 GMT
Not After : Jun 17 03:01:01 2025 GMT
Subject: CN=b8c5e971b8f5ef666976dd082262e87d819a4d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:f8:8d:b0:19:63:0f:6c:43:b5:a7:b7:3f:
f9:a9:f8:ba:e3:87:65:62:9f:53:43:49:60:3f:84:
1b:b6:28:27:5c:2f:1c:6e:ee:40:c0:2c:2b:11:fd:
5e:7f:99:d4:d8:3b:a0:de:46:33:9e:ab:6d:8d:70:
45:32:51:4f:3b:d5:90:b5:0b:8a:1c:79:e7:47:40:
57:dd:e6:cd:72:8b:9b:25:09:aa:a5:16:08:7d:ec:
86:96:6c:48:c2:c0:5f:8b:2b:08:f9:82:3f:c6:78:
9e:ac:ab:16:83:52:d7:b6:87:d0:8b:a9:4c:30:e0:
e4:82:9c:be:9d:d0:e2:65:f0:3c:a6:f6:ad:a0:f7:
26:44:9a:de:bf:2d:c6:19:76:f9:f8:91:cc:14:cd:
dc:47:cf:a3:10:76:25:51:19:2e:e5:85:64:0a:ab:
af:b8:10:85:d4:b8:52:60:eb:f0:87:e3:d9:28:f9:
b2:a8:73:85:9f:5e:72:fa:b0:12:fc:9b:00:70:0d:
44:22:ac:eb:d7:57:13:55:d9:89:21:1a:3b:e9:10:
bf:97:67:56:31:8f:a4:e7:4d:6b:82:01:b8:df:97:
6b:e1:8b:36:a4:26:f5:12:95:38:b3:68:5a:47:f9:
3c:4e:af:83:3a:46:42:ff:70:5b:cc:89:16:07:37:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C5:E9:71:B8:F5:EF:66:69:76:DD:08:22:62:E8:7D:81:9A:4D:0A
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:27:4d:8d:cc:5e:8b:5d:ef:dc:7e:10:ed:a3:b5:d9:f5:b0:
2a:5a:b9:c8:cc:48:be:31:d4:b3:a7:24:44:ff:85:f8:86:a5:
69:40:32:c9:c8:6f:87:a5:28:20:16:33:35:45:5c:14:fd:cd:
b0:a1:e0:7c:8a:36:1b:bf:ea:ea:92:b7:98:63:ff:ed:c1:1c:
21:b3:27:92:88:93:6e:3f:3f:12:18:7e:52:1a:b5:ef:e0:47:
bd:08:2e:fe:3c:85:1b:4f:45:cb:3f:2a:a0:e0:ea:f3:39:65:
ce:9b:aa:af:bf:22:c5:73:6a:dc:a1:f9:0c:92:bd:58:be:04:
2c:01:32:16:ef:4e:c5:88:92:14:e0:c1:17:5b:2c:97:a2:a9:
96:95:11:97:07:96:14:6f:b8:5d:a4:ff:50:a7:ea:b1:2e:6d:
3f:6b:cb:c0:f6:79:4e:34:d9:a3:b2:54:9c:73:ab:b0:31:d0:
60:7c:f0:a8:9f:5e:c0:f5:23:f4:ed:92:ac:58:a0:d6:2d:3e:
17:2f:08:fa:94:69:4a:73:a4:ad:ae:d8:d4:dc:92:3c:a5:d4:
57:0e:8c:e9:b5:9d:fa:0c:19:d2:ca:2d:d7:c7:fe:44:04:0d:
cc:c4:a6:4e:72:8e:b0:5e:f0:3c:87:8a:61:0a:82:8d:f7:05:
b4:e3:21:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:06:07 2025 by rpki-client